The Contagio post preserves Lazarus-linked BEAVERTAIL and INVISIBLE_FERRET sample information tied to the Contagious Interview and Wagemole activity described by Unit 42. The lure set targets job seekers and software developers with fake employer interviews and malicious NPM packages, leading to cross-platform malware on Windows, Linux, and macOS. INVISIBLE_FERRET is described as a Python backdoor with fingerprinting, remote-control, keylogging, browser credential theft, data exfiltration, and follow-on payload capabilities. The archive also lists GitHub-hosted package files, BEAVERTAIL DLLs, and ZIP/RAR lure archives that can support hash-based hunting and correlation.